Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS212112.roa
File: AS212112.roa (raw, json)
Hash identifier: /lzfoLie1uegLSZOKiPl4Lzun1rCtuf4GE7Gd1MLEbY=
Subject key identifier: 65:56:C5:A4:B8:49:63:61:63:6E:03:8B:2B:76:51:78:40:0D:17:8D
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 6689B5E6C1A3A3F9456DBA8E2A858CC0F619E33D
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS212112.roa
Signing time: Mon 30 Jun 2025 14:59:45 +0000
ROA not before: Mon 30 Jun 2025 14:54:45 +0000
ROA not after: Mon 29 Jun 2026 14:59:45 +0000
asID: 212112
IP address blocks: 2a09:54c7:2000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:89:b5:e6:c1:a3:a3:f9:45:6d:ba:8e:2a:85:8c:c0:f6:19:e3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:45 2025 GMT
Not After : Jun 29 14:59:45 2026 GMT
Subject: CN=6556C5A4B8496361636E038B2B765178400D178D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:22:e0:d2:70:f1:fe:3e:1e:56:d5:4b:3d:
93:a2:76:40:a9:a8:f3:7f:71:de:86:2f:95:6e:a6:
2c:35:0c:cc:49:cb:4b:86:ce:92:01:53:41:3b:20:
6a:1b:63:48:6b:e7:ec:1d:01:36:82:aa:a0:de:b0:
d7:bd:43:df:b0:69:bc:81:e9:69:c9:7f:e6:55:c2:
a2:f6:96:b3:15:9c:45:6d:65:6c:f0:72:53:93:91:
61:65:ba:9d:81:2e:39:55:2a:ef:00:c7:b1:21:e4:
76:d8:2c:9c:46:ad:3b:02:01:f3:07:99:40:8c:07:
d7:58:89:64:93:59:de:db:fa:92:a1:56:fe:ec:1a:
8a:09:ea:a4:78:ed:9a:24:05:0a:b7:21:2a:16:90:
e7:e7:29:4c:7e:ed:7a:9e:7f:32:95:4d:76:f2:cf:
ff:f2:1b:fd:f9:34:dc:10:85:99:9e:b2:92:c8:1b:
c9:ec:f4:7d:e0:6e:66:54:94:98:01:82:a1:3a:fd:
56:65:d0:bc:e9:35:ed:58:4b:e3:4c:d4:c4:55:00:
31:1b:27:95:1e:73:c5:06:65:76:79:46:6d:4a:e8:
22:2f:78:28:4d:b3:10:14:2d:b4:ed:a5:3b:20:f2:
7a:12:72:bf:d2:68:f5:99:49:5c:e8:79:a8:cb:a2:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:56:C5:A4:B8:49:63:61:63:6E:03:8B:2B:76:51:78:40:0D:17:8D
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS212112.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:2000::/36
Signature Algorithm: sha256WithRSAEncryption
7b:62:3e:73:4a:c2:dd:8a:2e:1d:df:b9:64:2c:fa:93:48:be:
ca:d0:f6:7a:65:36:e1:5f:8a:79:cf:8e:17:95:bd:c3:cb:cc:
b9:67:91:82:be:b1:0b:2e:6a:eb:ae:5a:a9:ab:2e:a7:b6:7e:
69:fb:69:e9:fa:03:7d:92:88:a0:a3:24:50:7f:f7:62:fb:19:
70:86:99:41:a9:d1:ee:2f:e4:b7:c7:8a:e7:c3:cd:7c:1e:21:
6c:ce:b8:f3:83:8b:01:76:12:e7:6c:6d:b9:b9:89:cc:aa:c2:
e1:6f:01:c1:89:9f:c1:69:7f:25:f0:cd:1b:f5:25:4b:df:d0:
65:4b:52:82:a5:c3:f7:93:79:3b:43:9a:4b:8b:8d:c1:da:9b:
3a:90:4a:d7:e2:c0:ca:61:11:94:da:9a:e4:15:5a:f1:10:82:
d9:f4:0f:0c:25:08:ad:18:68:40:79:fb:fc:23:fb:c3:d8:a9:
47:95:68:9c:45:78:92:63:f1:15:68:93:df:21:11:59:0a:e6:
8b:df:87:99:8a:e8:81:4b:df:50:94:4e:5a:4e:3a:88:71:ae:
74:76:50:23:f4:ca:d4:12:87:1e:0b:cd:aa:a9:fc:c8:50:53:
0e:05:11:8b:ca:a2:51:50:b2:53:f5:06:50:b6:4f:88:54:df:
a0:fe:37:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:13 2025 by rpki-client